.NET Framework Security

Hierarchy of .NET Configuration Files

As far as hierarchy goes, there is none higher than the machine.config file. This file can be found in the %WINDIR%\Microsoft.NET\Framework\[FrameworkVersion]\config\ directory, where %WINDIR% is the directory in which your version of Windows is installed and [Framework Version] is the version number of the .NET Framework running on your machine; for example, C:\WINDOWS\Microsoft.NET\Framework\v1.0.3617\config. From that, each .NET Web application running under IIS will contain a web.config file in the root directory. If you remove or never have this web.config file, the settings contained within the machine.config file will take over. Under this, each child folder can contain a separate web.config file that ...